UNITED STATES OF AMERICA 



Manning, Bradley E. 

PFC, U.S. Army, 

HHC, U.S. Army Garrison, 

Joint Base Myer-Henderson Hall 

Fort Myer, Virginia 22211 
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STIPULATION OF 
EXPECTED TESTIMONY 

Ms. Tamara Mairena 
DATED: Z June 2013 



It is hereby agreed by the Accused, Defense Counsel, and Trial Counsel, that if Ms. 
Tamara Mairena were present to testify during the merits and pre-sentencing phases of this court 
martial, he would testify substantially as follows: 



1. I am the primary evidence custodian at the Computer Crimes Investigative Unit (CCIU) of the 
U.S. Army Criminal Investigation Command (CID) in Quantico, Virginia. I have held this 
position since 2006. In this position, I track and catalog evidence maintained by our CCIU 
office. 



2. I have been a Certified Evidence Custodian since January of 2006. I received this 
certification from the U.S. Army Criminal Investigation Laboratory. Since January 2010, 1 have 
also been a Department of Defense (DOD) Cyber Investigations Training Academy certified 
digital media collector. 

3. I follow several general procedures when handling evidence as evidence custodian. The first 
time I receive a piece of evidence, I check the accompanying DA Form 4137 evidence custody 
document to make sure the evidence matches the description and that the marked-for- 
identification number on the evidence matches what is recorded on the form. I also check to 
make sure the form has been appropriately filled out. When I sign the evidence into the evidence 
room, I sign in the "received" column. I then log it in the evidence book and the database before 
placing it in the evidence room. When someone asks to receive a stored piece of evidence, I pull 
the voucher number and locate the evidence in its appropriate location. I check to make sure the 
evidence I am handing over matches the description on the form and then I release it to the 
Special Agent or Forensic Examiner who has requested it. I sign that I have released it and the 
individual receiving it signs that (s)he has received it. Each time I relinquish or assume custody 
of evidence, I check the description to make sure the evidence being transferred matches the 
forms used to transfer it. 



4. I first became involved in the present case because of my role in assisting the investigation 
team with the secure storage of evidence they collect. I signed several pieces of evidence from 
the investigating agents and forensic examiners into the evidence room and would release 
evidence back to them when they needed it for their investigation or examinations. In my role as 
evidence custodian, I have worked with and received evidence from Special Agent Kirk Ellis, 
Special Agent Antonio Edwards, Special Agent David Shaver, Special Agent Calder Robertson, 
Special Agent John Wilbur, and Special Agent Mark Mander. I also know Mr. Garon Young. 
He used to be the primary evidence custodian and trained me when I began working for Army 
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CCIU. Mr. Young currently serves as the alternate evidence custodian. As such, it is normal for 
him to sign something out of the evidence room and for me to sign it back in (or vice versa). 



5. On 18 June 2010, 1 signed a Lenovo laptop computer with Fujitsu computer hard drive (serial 
number: K404T8 1 2MF4D), collected from Mr. Adrian Lamo in Sacramento, California on 12 
June 2010, recorded as Item 1 on a DA Form 4137 marked as document number (DN) 76-10, 
and known as "Lamo Ubuntu Harddrive" out of the evidence room to SA Dave Shaver for 
forensic examination. I also signed out an HP Mini Brand computer (computer serial number: 
CNU90513VT) with Seagate hard drive (serial number: 5RE2C1QK), collected from Mr. 
Adrian Lamo in Carmichael, California on 12 June 2010, recorded as Item 1 on a DA Form 
4137, marked as DN 77-10, and known as "Lamo HP Harddrive" to SA Shaver for the same 
reason. He returned these items later that same day. I received and released this evidence 
according to the proper procedures I just described. I did not alter this evidence in any way. 

6. On 18 October 2010, 1 received evidence related to this investigation from SA Wilbur, 
recorded as Item 1 on a DA Form 4137 marked as DN 151-10. I took custody of a CD (marked 
"Wikileaks DoS Firewall Logs 13 Oct 10") collected from the Department of State on 15 
October 2010, and known as "DoS Firewall Logs". Upon receiving this evidence, I properly 
logged it into the evidence room using the same procedures described earlier. On 1 November 
2010, 1 properly released it to SA Shaver for examination. He returned it later that same day. I 
received and released this evidence according to the proper procedures I described earlier. I did 
not alter this evidence in any way. 

7. On 3 November 2010, 1 received nineteen pieces of evidence from SA Mander, collected 
from the home of Ms. Debra Van Alystne in Potomac, Maryland on 2 November 2010, recorded 
as Items 1-19 on a DA Form 4137 marked as DN 162-10. Item 2 on this DA Form 4137 was an 
SD memory card (serial number: BE0915514353G), known as "SD Card". On 10 December 
20 1 0, 1 properly released the "SD Card" to S A Shaver for examination. He returned it later that 
same day. I properly received the evidence back in to the evidence room according to the proper 
procedures I described earlier. I did not alter this evidence in any way. 




MAJ, JA 
Defense Counsel 



PFC, USA 
Accused 



Assistant Trial Counsel 
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